$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: ANhIABliILlepio3B4boAwJieCgGPPMQ3LSJvIsZvfk= Subject key identifier: 5D:77:D4:7C:49:24:C7:00:C1:37:2C:93:95:A1:EA:3B:4B:6D:4D:37 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 01B6 Signing time: Fri 09 May 2025 02:25:01 +0000 Manifest this update: Fri 09 May 2025 02:25:00 +0000 Manifest next update: Fri 16 May 2025 02:25:00 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: PD1XZ2Tag4M0XfZenFL4plpGOKbWdJBICoKyyKDrN4Y=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: May 9 02:25:00 2025 GMT Not After : May 16 02:25:00 2025 GMT Subject: CN=681d677d-cf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:73:bf:11:88:b0:f9:10:db:55:97:13:2d: 0d:7a:be:25:bc:83:dd:82:47:54:f9:72:f6:ad:aa: 96:bc:5c:b4:40:c8:c0:bc:79:59:ca:6a:8e:1c:c0: 0a:59:13:17:31:bf:bc:f0:b0:8e:10:72:25:52:21: 87:55:a8:55:0b:1c:2d:a4:28:b9:dc:c1:13:6e:ca: 43:c2:74:38:7c:11:d8:e6:9b:95:f4:e1:bb:a8:03: 22:36:f3:ba:ed:2a:ce:2b:c9:5e:2f:de:82:04:66: b6:ab:6b:13:6c:c6:6d:83:10:72:ea:7e:f4:84:4d: ab:a1:43:9a:c4:8c:ce:8a:b9:55:22:6b:47:32:fc: 1f:94:78:a3:1f:17:35:ff:90:30:90:be:ad:4b:3d: 0a:9f:b1:5f:ae:bf:e1:63:b8:e5:ed:06:d2:e7:94: d3:1c:b8:ec:d3:2d:0c:c2:16:f3:99:4c:87:80:ee: 9c:7f:aa:44:31:61:a7:ff:7a:a9:38:a9:dc:09:81: f0:29:ea:c3:5b:62:c7:56:00:e2:3d:30:46:92:35: 8a:e5:d3:0f:76:47:60:43:00:41:27:b5:ad:57:7d: e4:37:a5:87:6a:90:31:e6:a6:27:bb:64:a3:0d:d9: 4a:37:4a:fd:dc:d1:eb:ab:50:6c:23:82:07:6e:84: e9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:77:D4:7C:49:24:C7:00:C1:37:2C:93:95:A1:EA:3B:4B:6D:4D:37 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d2:80:0f:b1:82:47:b7:f9:48:9c:31:15:20:c1:26:91:66: a3:ad:18:44:64:a5:e0:eb:b7:8a:48:84:3f:b1:38:b3:75:10: 4d:bc:17:12:6f:02:df:e3:63:b8:eb:fd:2d:ea:d2:bd:45:df: d1:c0:54:4d:15:2c:80:7f:99:7b:35:8e:af:e8:38:c7:b7:3e: b6:52:c1:f9:03:7f:c3:6e:d2:f3:eb:d5:d1:73:0f:4b:14:c4: c0:28:6b:fb:e9:27:2e:8a:6c:41:5c:a4:09:a0:fe:af:fd:28: 1b:09:a4:d3:24:48:ae:d5:0a:3e:9f:ce:52:69:14:2c:90:81: af:a3:1a:55:ec:f9:d6:54:53:cf:98:db:7c:63:17:0f:5b:3c: f7:ba:dc:b0:4c:37:81:c1:68:c8:dc:b9:41:95:ff:fd:9d:d7: 2b:49:9c:07:61:a6:4f:f4:0c:4a:4d:82:5c:96:93:9f:5f:4b: 27:f7:d9:0e:ba:6e:39:31:ba:ba:d0:bc:4e:f6:8d:af:b5:5e: af:83:49:f7:3e:bc:ea:4e:c7:d3:67:52:2b:50:76:49:6c:f6: df:c2:44:f7:cf:19:f6:cc:27:91:38:f2:9b:9e:e2:e1:f5:ec: 57:30:e7:bd:cb:20:81:26:39:bc:72:68:9d:f8:d8:93:15:75: 1e:d4:b9:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUwNTA5MDIyNTAwWhcNMjUwNTE2MDIyNTAwWjAYMRYwFAYD VQQDEw02ODFkNjc3ZC1jZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjJzvxGIsPkQ21WXEy0Ner4lvIPdgkdU+XL2raqWvFy0QMjAvHlZymqOHMAK WRMXMb+88LCOEHIlUiGHVahVCxwtpCi53METbspDwnQ4fBHY5puV9OG7qAMiNvO6 7SrOK8leL96CBGa2q2sTbMZtgxBy6n70hE2roUOaxIzOirlVImtHMvwflHijHxc1 /5AwkL6tSz0Kn7Ffrr/hY7jl7QbS55TTHLjs0y0MwhbzmUyHgO6cf6pEMWGn/3qp OKncCYHwKerDW2LHVgDiPTBGkjWK5dMPdkdgQwBBJ7WtV33kN6WHapAx5qYnu2Sj DdlKN0r93NHrq1BsI4IHboTpuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF131HxJ JMcAwTcsk5Wh6jtLbU03MB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj0oAPsYJHt/lInDEVIMEmkWajrRhEZKXg67eKSIQ/sTizdRBNvBcS bwLf42O46/0t6tK9Rd/RwFRNFSyAf5l7NY6v6DjHtz62UsH5A3/DbtLz69XRcw9L FMTAKGv76ScuimxBXKQJoP6v/SgbCaTTJEiu1Qo+n85SaRQskIGvoxpV7PnWVFPP mNt8YxcPWzz3utywTDeBwWjI3LlBlf/9ndcrSZwHYaZP9AxKTYJclpOfX0sn99kO um45Mbq60LxO9o2vtV6vg0n3PrzqTsfTZ1IrUHZJbPbfwkT3zxn2zCeROPKbnuLh 9exXMOe9yyCBJjm8cmid+NiTFXUe1Ll7 -----END CERTIFICATE-----Generated at Sat May 10 03:46:20 2025 by rpki-client